Called after a 401; return true when a new token is available and the request should be retried once.